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(54) Method of modifying the instruction set of a smart card 

(57) The invention provides a method of modifying 
and/or extending the instruction set (100) of a smart 121 
card (1). Use is made of the attribute tables (121 , 122) 
associated with the commands of the existing instruc- 
tion set to modify the functions of the instructions. Thus, 
non-standard functions may be implemented without 
the need to use additional, i.e. non-standard instruc- 
tions. 
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Description 

BACKGROUND OF THE INVENTION 

The present invention relates to a method of modi- 5 
tying the instruction set of a smart card. More particu- 
larly, the present invention relates to a method of 
modifying individual instructions of a smart card. 

A smart card, also called IC card, is an electronic 
device for effecting payments. The integrated circuit of 10 
the card contains a microprocessor or the like for 
processing data. The processor of a smart card is nor- 
mally provided with an instruction set comprising 
instructions (commands) such as READ, WRITE, 
UPDATE, etc., for operating upon the (payment) data 15 
contained in the card. Often standardized instruction 
sets are used, such as defined by the ETSI TE-9 stand- 
ard. However, such an instruction set is necessarily lim- 
ited with respect to the number and the scope of the 
instructions. As electronic payment systems involving 20 
smart cards develop, the need often arises to add new 
functions to the card, or to alter existing functions. Such 
changes usually imply a modification of the instruction 
set of the smart card This would normally involve a 
redesign of the integrated circuit of the card, which is 25 
not only expensive but renders existing cards obsolete. 
Furthermore, altering a standardized instruction set 
would jeopardize its compatibility with the standard. 

For these and other reasons, the need arises to be 
able to modify the instruction set of smart cards without 30 
substantially deviating from the existing set. 

SUMMARY OF THE INVENTION 

It is thus an object of the invention to overcome the 35 
above-mentioned and other disadvantages of the prior 
art and to provide a method which makes it possible to 
modify an instruction set of a smart card without adding 
commands. It is a further object of the invention to add 
new functions to a smart card, the new functions being 40 
based on the original instruction set. 

In order to achieve these and other objectives, the 
invention provides a method ol modifying the instruction 
set of a smart card processor, a group of attributes 
being associated with each instruction of the set. the 45 
method comprising the step of inserting a new attribute 
in the group of attributes of each instruction to be modi- 
fied, said new attribute specifying an operation. 

That is, according to the present invention instruc- 
tions are modified by modifying their attributes. -Ar* so 
attribute typically specifies a n acces^ _cpndition^or^a 
specific key to be used by the instruction concerned. 
However, the attribute may contain machine code (or a 
pointer to machine code) specifying a further operation, 
the operation performing a saecificJunction-tsuctLSS^ 55 
cryptographicprocedOTe). By inserting a new operation, 
or a modified operation, in an attribute, the function of 
an instruction may be modified without altering the 
instruction proper. 



The method according to the invention may be 
applied in situations where the groups of attributes of 
the instruction set comprise a first table containing first 
attributes and a second table containing second 
attributes, the first table containing references to the 
second table and wherein a new attribute is inserted in 
the second table. Such a first table may e.g. comprise 
said specific key, while the second table contains proce- 
dures (operations) to be used fn conjunction with the 
instruction concerned. It should be noted that the first 
table may be referred to by a base table containing ref- 
erences. By inserting a new attribute in the second 
table, the modification is achieved with a minimal 
change in the attributes. 

Modern smart cards may have at least two different 
data files, e.g. for different applications of the smart 
card. In such a case, a group of attributes may comprise 
subgroups associated with the respective data files. The 
invention allows a new attribute to be inserted in a lim- 
ited number of subgroups, thus making instruction mod- 
ifications specific for individual data files. This way, a 
great flexibility of instructions may be achieved. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 shows, in perspective, a smart card as used 
for payment and identification purposes. 

Fig. 2 schematically shows the integrated circuit of 
the smart card of Fig. 1 . 

Fig. 3 schematically shows the instruction set, with 
its associated attributes, of the smart card of Fig. 2. 

Fig. 4 schematically shows further attributes 
referred to by the attributes of Fig. 3. 

EXEMPLARY EMBODIMENTS 

The smart card or IC card 1 shown schematically 
and by way of example in Fig. 1 comprises a substrate 
2, in which an integrated circuit is embedded. The inte- 
grated circuit is provided with contacts 3 for contacting a 
card reader or the like. It should be noted that the 
present invention can also be applied in the case of so- 
called contactless smart cards. 

The integrated circuit 10 shown schematically and 
by way of example in Fig. 2 comprises a processor 1 1 , 
a memory 12 and an input/output circuit 13. The mem- 
ory may comprise a volatile (RAM) memory part for 
temporarily storing data and a non-volatile (ROM) mem- 
ory part for permanently or semi -permanently storing 
data. The latter part is preferably an EEPROM type 
memory. The data stored in the non-volatile part may 
contain both programming data (instructions, programs) 
and payment data, i.e. data relating to monetary trans- 
actions. It will be understood that a separate* memory 
(not shown) may be provided to store the instruction set 
of the processor 11. 

The processor 1 1 may be a microprocessor having 
a standardized instruction set. for example in accord- 
ance with the ETSI TE-9 standard. IT will be understood 
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that other standards, or non-standards instruction sets, 
may also be used. The instruction set will be further 
explained with reference to Fig. 3. 

The input/output circuit 13 handles the communica- 
tion between the processor 1 1 and external devices (not 
shown) such as card readers. The input-output-circuit 
13. which may contain suitable buffers, is connected 
with the processor 1 1 via a data bus. The processor 1 1 
and the memory 12 may be connected by means of the 
same data bus. 

The instruction set shown schematically and by way 
of example in Fig. 3 and denoted in general by the refer- 
ence numeral 100 comprises a first part 110 and a sec- 
ond pari 1 20. The first part 110 contains the instructions 
proper, i.e the instruction code, and constitutes an 
instruction table. It will be understood that the instruc- 
tion code comprises the machine code executed by the 
processor. The instructions are symbolically rendered 
by their function names as READ, WRITE, etc. 

The second part 120 of the instruction set 100 con- 
tains entries containing attributes of the corresponding 
instructions of the first part 1 10. Each entry thus consti- 
tutes a group of attributes associated with an instruc- 
tion. The attributes-i nay for example comprise acce ss 
conditions and-key-numbers^denoted-ir>-Fig— 3--by-AG 
and KEYNR. respectively. Access conditions may com- 
prise ALWAYS. NEVER. PROTECTED, and the like. 
Key numbers may refer to entries in the Key Table - 
depicted in Fig. 4. The second part 120 of the instruc- 
tion set 100 constitutes a base table of attributes, which 
refers to further tables (depicted in Fig. 4). 

Although the first part (instruction table) 110 and 
the second part (attributes table) 120 of the instruction 
set 100 are shown in Fig. 3 for the sake of clarity as 
adjacent tables, in actual embodiments the tables 110 
and 120 may very weli^e^lOTed-at^ifferenHocat^RsnTf 
the soggrt card ^jrtemory-1 2-. In fact, a plurality of sec- 
ond parts (attributes tables) 120 may be present, each 
second part 120 being associated with a date file. Such 
a data file may contain data with respect to a specific 
application (function) of the smart card. Typical applica- 
tions are "purse", "loyalty program", and "access", for 
making or receiving payments, collecting loyalty credits, 
and gaining access to buildings and the like, respec- 
tively. Even within such an application more than one 
data file may be used, and thus more than one associ- 
ated group of attributes may exist. As a result of the 
attributes being specific to a data file, the function of an 
instruction may, at least for the parts defined by 
attributes, be specific to a data file. This will further be 
explained with reference to Fig. 4. 

The actual access conditions, shown symbolically 
in Fig. 3 by AC, may be contained in the base attributes 
table 120, or may be contained in a separate table (not 
shown). Similarly. the-keys-(KEY«1,,.KEY-2— ->-shown in 
Fig. 4 may be contained in the attributes table 100. For 
the sake of the explanation of the invention, it will be 
assumed that the entries KEYNR, which may simply 
numbers (1, 2. „.). refer to the Key Table 121 of Fig. 4. 



Each entry in the Key Table 121 of Fig. 4 contains a 
key nuoibeUMBJ-a key (KEY 1, KEY 2, ...) and a pro- 
cedureJ^entification-(denoted w I?JD.jn„Eig»-4)-.Each pro- 
cedure identification refe r s i n turn to-aruentr-y^ln-the 
5 Procedure-Table-V22T-Each entry in the Procedure table 
contains a procedure number and a procedure (opera- 
tion), denoted in Fig. 4 by e»g DFS nr RSA^(The Proce- 
dure list of table 122 in Fig. 4 erroneously has the 
heading "Key", this should read "Procedure"). Such a 
10 procedure may be a cr yptograpl l ie pi ucedu re;"Stteh-as 
DES and RSA, or'some othef-operation^orrdatar 

In accordance with the present invention, the 
instructions of a smart card may be modified by modify- 
ing their attributes. Thus by modifying an entry in the 
75 Procedure Table 1 22, a new function or a modification of 
an existing function may be achieved. In Fig. 4, a new 
function (e.g. multiply data with a common factor, or 
substract one from data) is entered at the second entry 
- of the Procedure Table. Thus if in the Key Table 1 21 Key 
20 nr. 3 is selected, the Procedure ID refers to procedure 
nr. 2, being the new functton. Each time an instruction is 
executed which involves the use-Gf~KE^-^7-4he-new- 
fu action will bo-invokerl. 

It will be understood that references to a new func- 
25 tion can be made in various ways, e.g. directly from the 
table 120 of Fig. 3. Also, the Key Table 121 may contain 
"dummy" keys so as to allow the use of the table without 
actually using a key. 

Instead of inserting the new function in the Proce- 
ss dure Table 122, a pointer may be inserted which points 
to a memory location where the new or modified code is 
stored. 

In case a base attribute table (120 in Fig. 3) is asso- 
ciated with a data file, different attribute tables may exist 

35 for different data files. The method according to the 
invention allows for a flexible instruction set by modify- 
ing attrtoutes for individual data files. 

Smart cards may c omprise a hierarchical directory 
structure for o rganizing their data files, ea ^h, pr^'T ^ f 

40 attributes jaeing associated with at least one data file . In 
such a case a group of attributes may be applicable to 
all data files l ower in_the hierarchy relative to the data 
file the group is assiciated with. That is, if an instruction 
is changed by modifying an attribute (of a group of 

45 attributes) associated with a certain data file, the modi- 
fication holds for all data files hierarchica lly .toweu^ifl- 
tive to said^d^iaJiLe, This allows an instruction to be 
altered for e.g. a specific card a pplicat ion^ 

As is explained above, the modification of instruc- 

so tions is achieved in accordance with the present inven- 
tion by replacing and/or modifying attributes. The 
method of the invention thus enables the use of stand- 
ard instructions (standard card functions) to effect non- 
standard operations. The invention also provides a 

55 modified instruction set of a smart card, as well as a 
smart card provided with a modified instruction set. 

ft will be understood by those skilled in the art that 
the embodiments described above are given by way of 
example only and that many modifications and addi- 
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tions are possible without departing from the scope of 
the present invention. 

Claims 

5 

1. Method of modifying the instruction set (100) of a 
smart card processor (11), a group of attributes 
(e.g. AC, KEYNR, KEY 1) being associated with 
each instruction of the set, the method comprising 
the step of inserting a new attribute in the group of io 
attributes of each instruction to be modified, said 
new attribute specifying an operation. 

2. Method according to claim 1 , wherein the groups of 
attributes of the instruction set comprise a first table is 

(121) containing first attributes and a second table 

(122) containing second attributes, the first table 
containing references to the second table, and 
wherein a new attribute (NEW FUNCTION) is 
inserted in the second table (122). 20 

3. Method according to claim 1 or 2, wherein the inser- 
tion of an attribute involves the replacement of an 
attribute. 

25 

4. Method according to any of the preceding claims, 
wherein the smart card (1) has at least two data 
files, a group ot attributes comprising subgroups 
associated with the respective data files, a new 
attribute being inserted in a limited number of sub- 30 
groups. 

5. Method according to claim 4, wherein the smart 
card comprises a hierarchical directory structure for 
organizing its data files, each group of attributes 35 
being associated with at least one data file, said 
group of attributes being applicable to all data files 
lower in the hierarchy relative to the data file the 
group is assiciated with. 

40 

6. Instruction set of a smart card, modified by the 
method according to any of the preceding claims. 

7. Smart card (1), comprising an instruction set modi- 
fied by the method according to any of the claims 1 45 
through 5. 
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